jacky247
2005-06-07, 02:03 AM
問題如下:
只要有流量的動作,系統就會自動開一些port,從1026到4000多(跳著開),用防毒跟掃木馬都掃不到,重灌還是會有(有Format) !
系統: win2000 pro
在命令提示字元下輸入 netstat -a 的指令,得到下列訊息,系統自動開的port,遠端都是0
C:\>netstat -a
Active Connections
Proto Local Address Foreign Address State
TCP win-tt5h0ff0fv8:epmap win-tt5h0ff0fv8:0 LISTENING
TCP win-tt5h0ff0fv8:microsoft-ds win-tt5h0ff0fv8:0 LI
TCP win-tt5h0ff0fv8:1025 win-tt5h0ff0fv8:0 LISTENING
TCP win-tt5h0ff0fv8:1026 win-tt5h0ff0fv8:0 LISTENING
TCP win-tt5h0ff0fv8op3 win-tt5h0ff0fv8:0 LISTENING
TCP win-tt5h0ff0fv8:1027 win-tt5h0ff0fv8:0 LISTENING
TCP win-tt5h0ff0fv8:netbios-ssn win-tt5h0ff0fv8:0 LISTENING
UDP win-tt5h0ff0fv8:microsoft-ds *:*
UDP win-tt5h0ff0fv8:1098 *:*
UDP win-tt5h0ff0fv8:netbios-ns *:*
UDP win-tt5h0ff0fv8:netbios-dgm *:*
贊助商連結
只要有流量的動作,系統就會自動開一些port,從1026到4000多(跳著開),用防毒跟掃木馬都掃不到,重灌還是會有(有Format) !
系統: win2000 pro
在命令提示字元下輸入 netstat -a 的指令,得到下列訊息,系統自動開的port,遠端都是0
C:\>netstat -a
Active Connections
Proto Local Address Foreign Address State
TCP win-tt5h0ff0fv8:epmap win-tt5h0ff0fv8:0 LISTENING
TCP win-tt5h0ff0fv8:microsoft-ds win-tt5h0ff0fv8:0 LI
TCP win-tt5h0ff0fv8:1025 win-tt5h0ff0fv8:0 LISTENING
TCP win-tt5h0ff0fv8:1026 win-tt5h0ff0fv8:0 LISTENING
TCP win-tt5h0ff0fv8op3 win-tt5h0ff0fv8:0 LISTENING
TCP win-tt5h0ff0fv8:1027 win-tt5h0ff0fv8:0 LISTENING
TCP win-tt5h0ff0fv8:netbios-ssn win-tt5h0ff0fv8:0 LISTENING
UDP win-tt5h0ff0fv8:microsoft-ds *:*
UDP win-tt5h0ff0fv8:1098 *:*
UDP win-tt5h0ff0fv8:netbios-ns *:*
UDP win-tt5h0ff0fv8:netbios-dgm *:*
贊助商連結